Hello J,
Wednesday, October 27, 2004, 6:29:21 AM, you wrote:
JTH> Knowing that the more rules sets you add, the longer it takes to scan a
JTH> message, what rule sets do you recommend? I have found several sites with
JTH> sure sets such as The Rules Emporium and the SA wiki but I am certain I do
JTH> not need every rule set from those sites.
In addition to Matt's suggestions, look on the www.rulesemporium.com
site for the rule set files I've created with the names
70_sare_${whatever]0.cf -- those "file 0" files contain rules chosen
because they a) hit measurable spam, and b) hit no non-spam (at least
in our SARE mass-checks). They're the best bang for the buck in their
families.
I also have a fond place for 70_sare_specific.cf
I agree with Matt -- add these one at a time, and see how things work.
If you hit a performance wall, stop. Adding more rules makes things
worse.
If you add all of these, have plenty of resources left, and still
significant spam getting through, then add in the {whatever}1 file
rules.
Bob Menschel
